Limitations of manual pentesting